Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: tp/sFfjgBv4vi1JcC8YNlt6hGm6fSTLdIyCwOxdi8Tg=
Subject key identifier: 3B:87:B1:BD:77:CB:A3:45:9E:1D:E0:32:ED:00:4B:44:C4:43:F6:98
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 01A0C66B1E7F398FEA36FE485DF7C270CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:43 +0000
Manifest this update: Tue 22 Sep 2026 00:01:43 +0000
Manifest next update: Wed 23 Sep 2026 00:01:43 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: H5yqIiej+mFMU+TTrPg9dgVIIpJDHGLdUxoggjy5jdY=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:1e:7f:39:8f:ea:36:fe:48:5d:f7:c2:70:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Sep 22 00:01:43 2026 GMT
Not After : Sep 23 00:01:43 2026 GMT
Subject: CN=3b87b1bd77cba3459e1de032ed004b44c443f698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:95:47:34:8f:bd:53:05:5e:34:82:04:d5:
07:68:2f:30:00:87:74:e7:cf:c3:63:3f:10:c8:f0:
40:59:00:f1:f2:3a:4a:31:8d:35:cb:17:53:66:fe:
cb:4a:ba:12:1f:3c:63:10:82:bd:1e:bc:33:31:74:
49:e6:92:cb:f3:3a:ac:87:8a:8a:2a:8b:dc:85:a1:
2c:ec:66:71:da:cc:3d:17:39:07:54:22:a6:ee:2b:
a5:6c:ce:67:94:a1:0a:b7:37:73:53:a7:00:4b:56:
2f:3d:f8:8f:f3:e1:9d:cc:bd:4f:49:db:09:9e:de:
e8:69:71:6b:30:08:97:88:5e:80:92:08:a3:d9:5f:
e0:1f:ff:aa:3e:99:f1:09:8d:e1:93:bd:d8:56:2c:
fe:50:82:5a:a3:95:1f:bf:95:e5:d5:b4:aa:91:b4:
6c:1c:56:69:bf:53:17:63:e9:92:21:fb:3f:55:5f:
56:4c:2c:9d:1f:bf:7d:06:66:70:85:2f:d7:b0:98:
31:12:43:5d:c9:3a:ec:fc:94:1f:34:8c:1e:0e:ce:
48:83:98:d8:a8:0a:8b:78:29:28:ab:e3:40:9f:f4:
e8:2a:a3:6d:4f:fd:c8:64:ad:05:05:b1:02:87:7f:
57:6b:9c:20:e1:ab:c5:83:94:d0:1f:d5:94:b3:f7:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:87:B1:BD:77:CB:A3:45:9E:1D:E0:32:ED:00:4B:44:C4:43:F6:98
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:09:a4:0a:08:99:c7:77:e1:14:c8:c7:a2:74:94:65:70:
dc:8c:29:67:1d:48:6c:93:40:f5:9f:1f:1b:c7:84:f1:12:23:
2e:26:96:36:48:10:12:9f:f2:2d:e4:7b:c0:cc:a7:24:91:52:
55:83:b2:79:5b:0f:1d:67:52:88:18:f3:a0:29:d8:9a:81:ad:
c2:0e:a8:fd:9b:ed:ee:8f:17:f4:86:d9:9d:8b:4f:62:fe:9d:
a8:31:45:eb:a0:05:6c:78:dd:6e:82:46:7f:dd:86:8e:a4:95:
e2:5d:df:85:29:e4:f1:63:af:87:a9:69:e0:84:b7:61:ba:b3:
b0:14:4e:2a:f7:9b:8a:ee:33:f5:ab:f0:cc:05:e0:a2:d9:01:
4b:0b:a0:9d:8a:d5:c8:8d:cf:e7:77:16:c2:f1:55:57:ba:d7:
77:37:c6:63:98:3a:64:16:f1:fb:15:58:8c:4c:8a:fa:0d:0b:
61:7a:01:7c:d6:f3:ed:a7:c3:29:e8:54:10:29:93:aa:07:a8:
0c:dc:2d:29:5f:96:e8:95:5e:bd:f3:8a:56:e8:35:81:cb:44:
7f:74:3d:3c:e3:a9:40:1f:c7:58:a2:4f:e5:5d:4d:c5:37:7e:
2d:ad:e4:8f:dc:6d:cd:9f:87:e9:26:3b:f7:1c:e0:cb:43:79:
e6:05:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:07:14 2026 by rpki-client